DNSSEC Analyzer - BONDPRO.GOV

Domain Name:

Time: 2020-09-28 22:05:21 UTC, NTP stratum 4

Analyzing DNSSEC problems for BONDPRO.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (1139 bytes) ;; HEADER SECTION ;; id = 58121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	DNSKEY=26116 is now in the chain-of-trust
	Query to d.root-servers.net for BONDPRO.GOV/A
	Received 666 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (666 bytes) ;; HEADER SECTION ;; id = 44538 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201011170000 20200928160000 46594 . YT36cFEJUOWU8vgjLHGClIceTTPfg20p270WzIev6mS++khQZhOt1NVF0wQsiOI/l7/Xd9+lG5eG JJWIU/MIdphrWcjTd1r1hXilNaQND9/K5crhQQnEz72L3WLzCqqChqjiqVY+654k5WBQJVD8MC91 SmE8iCJ5Um7r0rFzCDDOXZmyQJt8qwE2pdGSoDqME8fv/P15TWIgkcbCFb0d/fgSZr/B+wl9XKAd 2DwRrD78HQMRXK9Nkm6YiKiyL8Kcy5vgRgnGVEWueufxcwoL20z6McFt3nrCUVXE+CkhDZLkr8n9 awF18xGFHnTSg6itvPxkY9SwfpuRvvP6ef5rFA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (658 bytes) ;; HEADER SECTION ;; id = 26589 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201011170000 20200928160000 46594 . YT36cFEJUOWU8vgjLHGClIceTTPfg20p270WzIev6mS++khQZhOt1NVF0wQsiOI/l7/Xd9+lG5eG JJWIU/MIdphrWcjTd1r1hXilNaQND9/K5crhQQnEz72L3WLzCqqChqjiqVY+654k5WBQJVD8MC91 SmE8iCJ5Um7r0rFzCDDOXZmyQJt8qwE2pdGSoDqME8fv/P15TWIgkcbCFb0d/fgSZr/B+wl9XKAd 2DwRrD78HQMRXK9Nkm6YiKiyL8Kcy5vgRgnGVEWueufxcwoL20z6McFt3nrCUVXE+CkhDZLkr8n9 awF18xGFHnTSg6itvPxkY9SwfpuRvvP6ef5rFA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 403 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (403 bytes) ;; HEADER SECTION ;; id = 63680 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201011170000 20200928160000 46594 . YT36cFEJUOWU8vgjLHGClIceTTPfg20p270WzIev6mS++khQZhOt1NVF0wQsiOI/l7/Xd9+lG5eG JJWIU/MIdphrWcjTd1r1hXilNaQND9/K5crhQQnEz72L3WLzCqqChqjiqVY+654k5WBQJVD8MC91 SmE8iCJ5Um7r0rFzCDDOXZmyQJt8qwE2pdGSoDqME8fv/P15TWIgkcbCFb0d/fgSZr/B+wl9XKAd 2DwRrD78HQMRXK9Nkm6YiKiyL8Kcy5vgRgnGVEWueufxcwoL20z6McFt3nrCUVXE+CkhDZLkr8n9 awF18xGFHnTSg6itvPxkY9SwfpuRvvP6ef5rFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20201011170000 20200928160000 46594 . YT36cFEJUOWU8vgjLHGClIceTTPfg20p270WzIev6mS++khQZhOt1NVF0wQsiOI/l7/Xd9+lG5eG JJWIU/MIdphrWcjTd1r1hXilNaQND9/K5crhQQnEz72L3WLzCqqChqjiqVY+654k5WBQJVD8MC91 SmE8iCJ5Um7r0rFzCDDOXZmyQJt8qwE2pdGSoDqME8fv/P15TWIgkcbCFb0d/fgSZr/B+wl9XKAd 2DwRrD78HQMRXK9Nkm6YiKiyL8Kcy5vgRgnGVEWueufxcwoL20z6McFt3nrCUVXE+CkhDZLkr8n9 awF18xGFHnTSg6itvPxkY9SwfpuRvvP6ef5rFA== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 8463 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201011190254 20200926185754 7698 gov. mFdQjYw08vcvqk5uwVCSxFO7bkaG4r1pyWbdvVG18xwim21pRqEhuIYQ5CfqpqMrCUimS608zZ+y JVkHyLMipc+0CIhUhIzY239yFXHXcwfFmjEgK6gb4uLKrcW33Poo5eYzzlbMVvFYuvp+5d4sOwC8 Ckb57WulhswCluCJIL0p4iOQ2b8W6sCm2vcKKmlKrBjWBUy61wWcvRgLVyqMrKBsWXXp0GnamHtT c3kuDGeibglMFzcI12QDK2k0SyVwbwnfSv+P8VAM0SPoSCbri3NZpKbfmkqSPcE6L2nND+zz9Eyu vIv38KeDRN/DuLAQmfY/NV6OYmIyg1Yw2t3KYQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201011190254 20200926185754 7698 gov. mFdQjYw08vcvqk5uwVCSxFO7bkaG4r1pyWbdvVG18xwim21pRqEhuIYQ5CfqpqMrCUimS608zZ+y JVkHyLMipc+0CIhUhIzY239yFXHXcwfFmjEgK6gb4uLKrcW33Poo5eYzzlbMVvFYuvp+5d4sOwC8 Ckb57WulhswCluCJIL0p4iOQ2b8W6sCm2vcKKmlKrBjWBUy61wWcvRgLVyqMrKBsWXXp0GnamHtT c3kuDGeibglMFzcI12QDK2k0SyVwbwnfSv+P8VAM0SPoSCbri3NZpKbfmkqSPcE6L2nND+zz9Eyu vIv38KeDRN/DuLAQmfY/NV6OYmIyg1Yw2t3KYQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=26665 is now in the chain-of-trust
	Query to c.gov-servers.net for BONDPRO.GOV/A
	Received 452 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (452 bytes) ;; HEADER SECTION ;; id = 5832 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) BONDPRO.GOV. 86400 IN NS ns1.treasury.GOV. BONDPRO.GOV. 86400 IN NS ns3.treasury.GOV. BONDPRO.GOV. 3600 IN DS 57430 8 1 68a34ff15f326300d54f6161b22101293200bbe5 BONDPRO.GOV. 3600 IN DS ( 57430 8 2 8b5851f242c9294aae97a0a9702e41761dc09f27b587c226314e257d844734f0 ) BONDPRO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201005161008 20200928161008 26665 gov. jG9rMn+j6sk5YcTP/mi1cUwHd31zi0iiy5Xjfy2x4Idazk3Lk1kOAd/akqwPRglerhSQcwsSiNE9 dDenh03mbxUP5sm1sL7aiSQPoMmuP6gngDnLUdyu4tcPEgZ1b/FLy67aonc91dq40mlSM0kqkP52 kAtwATBVng5eo61Yb3ML/qOOT07fLoVASJYt02IgCRrN+aNIRa+LcowmYwvuYg== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for BONDPRO.GOV/DNSKEY
	Received 452 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (452 bytes) ;; HEADER SECTION ;; id = 48120 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) BONDPRO.GOV. 86400 IN NS ns1.treasury.GOV. BONDPRO.GOV. 86400 IN NS ns3.treasury.GOV. BONDPRO.GOV. 3600 IN DS 57430 8 1 68a34ff15f326300d54f6161b22101293200bbe5 BONDPRO.GOV. 3600 IN DS ( 57430 8 2 8b5851f242c9294aae97a0a9702e41761dc09f27b587c226314e257d844734f0 ) BONDPRO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201005161008 20200928161008 26665 gov. jG9rMn+j6sk5YcTP/mi1cUwHd31zi0iiy5Xjfy2x4Idazk3Lk1kOAd/akqwPRglerhSQcwsSiNE9 dDenh03mbxUP5sm1sL7aiSQPoMmuP6gngDnLUdyu4tcPEgZ1b/FLy67aonc91dq40mlSM0kqkP52 kAtwATBVng5eo61Yb3ML/qOOT07fLoVASJYt02IgCRrN+aNIRa+LcowmYwvuYg== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone BONDPRO.GOV

BONDPRO.GOV

	Checking DS between GOV and BONDPRO.GOV
	Query to b.gov-servers.net for BONDPRO.GOV/DS
	Received 319 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (319 bytes) ;; HEADER SECTION ;; id = 1254 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN DS ;; ANSWER SECTION (3 records) BONDPRO.GOV. 3600 IN DS 57430 8 1 68a34ff15f326300d54f6161b22101293200bbe5 BONDPRO.GOV. 3600 IN DS ( 57430 8 2 8b5851f242c9294aae97a0a9702e41761dc09f27b587c226314e257d844734f0 ) BONDPRO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201005161008 20200928161008 26665 gov. jG9rMn+j6sk5YcTP/mi1cUwHd31zi0iiy5Xjfy2x4Idazk3Lk1kOAd/akqwPRglerhSQcwsSiNE9 dDenh03mbxUP5sm1sL7aiSQPoMmuP6gngDnLUdyu4tcPEgZ1b/FLy67aonc91dq40mlSM0kqkP52 kAtwATBVng5eo61Yb3ML/qOOT07fLoVASJYt02IgCRrN+aNIRa+LcowmYwvuYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for BONDPRO.GOV in the GOV zone
	DS=57430/SHA-1 has algorithm RSASHA256
	DS=57430/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`BONDPRO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201005161008 20200928161008 26665 gov. jG9rMn+j6sk5YcTP/mi1cUwHd31zi0iiy5Xjfy2x4Idazk3Lk1kOAd/akqwPRglerhSQcwsSiNE9 dDenh03mbxUP5sm1sL7aiSQPoMmuP6gngDnLUdyu4tcPEgZ1b/FLy67aonc91dq40mlSM0kqkP52 kAtwATBVng5eo61Yb3ML/qOOT07fLoVASJYt02IgCRrN+aNIRa+LcowmYwvuYg== )`
	RRSIG=26665 and DNSKEY=26665 verifies the DS RRset
	DS=57430/SHA-1 is now in the chain-of-trust
	`BONDPRO.GOV. 3600 IN DS 57430 8 1 68a34ff15f326300d54f6161b22101293200bbe5`
	`BONDPRO.GOV. 3600 IN DS ( 57430 8 2 8b5851f242c9294aae97a0a9702e41761dc09f27b587c226314e257d844734f0 )`
	Query to ns3.treasury.GOV for BONDPRO.GOV/DNSKEY
	Received 678 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (678 bytes) ;; HEADER SECTION ;; id = 35754 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) BONDPRO.GOV. 300 IN DNSKEY ( 257 3 8 AwEAAdTvqkGP3SPLgHEFRmAUJ1ImUWeZBQsP6TnlQaVPQIOdajO8a4DZsQZlQi/o/ykjuftSZXxN lUiCzsnJo2pc0ZHmoPQdf9QHRZR4JIp+iXXWVi2VylSlX29w5Wrb1vRneoxV+Krt9WXgrGhpkVW3 jgQUBxICk/M7ERIUR42EkVz3 ) ; Key ID = 57430 BONDPRO.GOV. 300 IN DNSKEY ( 256 3 8 AwEAAdocQ1gIhwQLr10IJOA7ci3zqKz7UdJZ+z5yQqYSIyvqOK8+VsM7lpbqHcqKlGvYoTFwMlag Zn4vTGT+wgYhX7vFxeZ0Vm8Ksty/vcbrA3GanfA/2KR+p3HcRDqOrVbKJmZnv0bfNBfsB+g6ZJqI /s7aEeYNWOPL0+v2fyU6SoL1 ) ; Key ID = 11955 BONDPRO.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201003052857 20200926052857 57430 bondpro.gov. auuqKZtbZt9XFHJq32e2yOuJC+Uh3UNTSBTj7RFgMZn3kRsWZi7XaeGspoduaqrwQW38m71+u8u0 opB51iY+9Y/hav7LTWqKwvhomMJxNnTNbs7BtjEaxDvCbd9lVAWlbP5GH2Z+sLTkvcxprobWvtDg J/lL/6JmggrNmTyro6A= ) BONDPRO.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201003052857 20200926052857 11955 bondpro.gov. rPPDRpKbRD/El/bWoHNu3SNzjejt+ga6jHJJ2PYRWbvQfjLHF6OYO/FGKf/tjee4gHmIH5h1zPGZ qfQVzC+eArP2o3MEYoxjS7F8JrIc2WhnGqMsK+NUNGGSQcct+uMC4eoC/0FIQjW35Exwk4F8DgAf gemD3nCbdy9p5t7NBUI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for BONDPRO.GOV
	`BONDPRO.GOV. 300 IN DNSKEY ( 257 3 8 AwEAAdTvqkGP3SPLgHEFRmAUJ1ImUWeZBQsP6TnlQaVPQIOdajO8a4DZsQZlQi/o/ykjuftSZXxN lUiCzsnJo2pc0ZHmoPQdf9QHRZR4JIp+iXXWVi2VylSlX29w5Wrb1vRneoxV+Krt9WXgrGhpkVW3 jgQUBxICk/M7ERIUR42EkVz3 ) ; Key ID = 57430`
	`BONDPRO.GOV. 300 IN DNSKEY ( 256 3 8 AwEAAdocQ1gIhwQLr10IJOA7ci3zqKz7UdJZ+z5yQqYSIyvqOK8+VsM7lpbqHcqKlGvYoTFwMlag Zn4vTGT+wgYhX7vFxeZ0Vm8Ksty/vcbrA3GanfA/2KR+p3HcRDqOrVbKJmZnv0bfNBfsB+g6ZJqI /s7aEeYNWOPL0+v2fyU6SoL1 ) ; Key ID = 11955`
	DNSKEY=57430/SEP is now in the chain-of-trust
	DS=57430/SHA-1 verifies DNSKEY=57430/SEP
	DS=57430/SHA-256 verifies DNSKEY=57430/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`BONDPRO.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201003052857 20200926052857 57430 bondpro.gov. auuqKZtbZt9XFHJq32e2yOuJC+Uh3UNTSBTj7RFgMZn3kRsWZi7XaeGspoduaqrwQW38m71+u8u0 opB51iY+9Y/hav7LTWqKwvhomMJxNnTNbs7BtjEaxDvCbd9lVAWlbP5GH2Z+sLTkvcxprobWvtDg J/lL/6JmggrNmTyro6A= )`
	`BONDPRO.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201003052857 20200926052857 11955 bondpro.gov. rPPDRpKbRD/El/bWoHNu3SNzjejt+ga6jHJJ2PYRWbvQfjLHF6OYO/FGKf/tjee4gHmIH5h1zPGZ qfQVzC+eArP2o3MEYoxjS7F8JrIc2WhnGqMsK+NUNGGSQcct+uMC4eoC/0FIQjW35Exwk4F8DgAf gemD3nCbdy9p5t7NBUI= )`
	RRSIG=57430 and DNSKEY=57430/SEP verifies the DNSKEY RRset
	RRSIG=11955 and DNSKEY=11955 verifies the DNSKEY RRset
	DNSKEY=11955 is now in the chain-of-trust
	Query to ns1.treasury.GOV for BONDPRO.GOV/A
	Received 1907 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1907 bytes) ;; HEADER SECTION ;; id = 19914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN A ;; ANSWER SECTION (2 records) BONDPRO.GOV. 86400 IN A 166.123.219.80 BONDPRO.GOV. 86400 IN RRSIG ( A 8 2 86400 20201005185055 20200928185055 11955 bondpro.gov. V9Xo0b0lu5c3CVluJSxtbzlk3sIyyaVrtxQJQw9eqh5SeOlZUKyD+SEGfsfR3V0szujgTvp0CV0y cv9gzcKaUdnI2HuzLV3HyRKl40J8INyIWBZncf1ERzC8wM/YJwRP1KPCw19j2qV8qGQw+1IJRliw 2SA4y21jS2zeAw6yVls= ) ;; AUTHORITY SECTION (3 records) BONDPRO.GOV. 300 IN NS ns3.treasury.GOV. BONDPRO.GOV. 300 IN NS ns1.treasury.GOV. BONDPRO.GOV. 300 IN RRSIG ( NS 8 2 300 20201005185055 20200928185055 11955 bondpro.gov. wsi+ByouidDRUsn6mnRq2+fPQz1FOFzIOZBJpqj5b4chRhA0UzZ/FwZv05GopLpuNeqmOwCemO6k JJP6LAqmQMG4LFD6GcdaaOD/cELai2z0Hv1KUlHxT2ZjYJ4eFhmJKV/CghIMB1lNQ6BtC9l62EKO +RRA955zRcuzqC4FBsw= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201005181008 20200928181008 22148 treasury.gov. BcZEbCjo4lV90VSxVQ1W95i1JTjjnOmVH4ylG7acVqxf6IN3zzkerwTrup8YyO9ltHM4KieKaCRQ Fq23ib5eu8lgMyhzjV0seNp5LRVcoDJV1wmJD1ilD9d+dppXnCpSfEDudiAis9f/hGNXK4VuM3I+ H/Z7xSwATwD14FaUh48= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201005181008 20200928181008 22148 treasury.gov. AuOBTpuFKQPM+bshvc5i/Z8BdVlZ3WLBoXlAsFExS7mIKXX6aAUPnXpkVtGa9quOUDvaMLHsOr81 mvbdaQDNIipOquiQWG8lyLUTCSuGCuCxR1+Vw+MheifMRKb0k78AZ6l3MElfsfXtVALLdsav7M3r hFxBd01rM0b2RP/43tA= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201005181008 20200928181008 22148 treasury.gov. TjkykkAhBDuesLri7ntoyH3+sEi/2g+mp56G9GKbORlIxWeBO+fOK00gQ3mc9A6Ogi3IGWPH6Qlb 5IA1aRWFk311AV6W7C5U5x1l7qpL915vFCUF4isIjWHneTa6KcOUIQQadhBPOcTcrRFM7kaGPgMP hMbUIQBylfeGlWJmNgY= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201005181008 20200928181008 22148 treasury.gov. ZBeCD/g1u4b7N7oPsPn8AY35Ym5ggJVu8nzB7mRkpMysdszJDIj668IFzCUBLvA0KH+muTlvcaP5 X2X3pziXMg3Oj9MCXTkc8O7BMSoVe9QiF1wocn8jJ/Rd3D9edQZs4FUMtOQlDllQ2MNdeODWmNU9 GSwqYD9GzktS6pfHaQ8= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	BONDPRO.GOV is authoritative for BONDPRO.GOV
	Found RRSIG signed by bondpro.gov zone
	Query to ns3.treasury.GOV for BONDPRO.GOV/SOA
	Received 1946 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1946 bytes) ;; HEADER SECTION ;; id = 57085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN SOA ;; ANSWER SECTION (2 records) BONDPRO.GOV. 300 IN SOA ( ns1.treasury.GOV. webadmin.bpd.treas.GOV. 2006156029 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) BONDPRO.GOV. 300 IN RRSIG ( SOA 8 2 300 20201003151117 20200926151117 11955 bondpro.gov. O2d1ZtPdMeOMGs7MFBhwnVW3a++JmuRZEsaG+Z7NG0qVLORsp4FjpTe2zmTM9PCsVxuaWcIAj1CQ m4+fv8xE/4elvk7P75fkC5Wn9qKaYCir8yBV9fpEo5drV4W0Ff4x0KgJNNpmASpG6d5Kz9NE0zMI CnI/xt3XNrjHMt/M6KM= ) ;; AUTHORITY SECTION (3 records) BONDPRO.GOV. 300 IN NS ns3.treasury.GOV. BONDPRO.GOV. 300 IN NS ns1.treasury.GOV. BONDPRO.GOV. 300 IN RRSIG ( NS 8 2 300 20201002113013 20200925113013 11955 bondpro.gov. soliurILuobz4WEX+yV4T3W4YKOeYW9KxZzYL4zFQz+ZStQL01H93zhjDJ+fRM0p1BgdA5vxQ9lS IGznE6WDo9mV12HqSBE+i85LOvW0HEMTRIkS/c3gX7cH8V1UPVaDoTJavHOaSgXLr3L4Jg7EIdCV oC1WQFk1nQiHVIRxmho= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201001132308 20200924132308 22148 treasury.gov. XCrF7AuNeH9RRXGlYTdMJM0gCSzZRugwcSjxW6MDRZ5zn7NnMcwATtPw3R1hwyJf36SeBacrGq3T 2p+bjfYbS9QsR5XEzIVyeoJ6J2e36Z6ldc9hdcTu4KimxLJOUwfmMGdO76rMgbR0/zMeuUDZnY38 /y52m30vo2lT6993FfY= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002052637 20200925052637 22148 treasury.gov. AG77FZXctZztpOjdfpt7tvC3dlLQFUtowIKEMzJT7OeId2eNinETqGmBrrJwmPqpfHrGs1WMqhv5 1RIH8C0iI/2LVJG2GdIdhkMZWQAq+gz4QttI6ZSyWjGU3a7rl4OxKiOUsTenceKoLmaDali5GQst WD0upshDlNjpLBkfQVc= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201004180934 20200927180934 22148 treasury.gov. H9aFnGZSu7BYJaadxuwXGPq+a8vTJuqWKZ6w7WcOPbHNyiZ+COk5jpqLvLFLlCQBLDYvknj9Ojpd ihgvvH9oMUvs8luGgEe4Zca61O8mKHd2iWOhqaP2z8ropVjMenojsVCb3VwzAIPdL0JKzVWtNVj/ nURRI/7sBuB18sr7Vvs= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201004180934 20200927180934 22148 treasury.gov. IrKK72xmHQkjlPqZ8l3dktA4bG9LituOgk4OQdqFyJgTrwpEIo+NOqs8+mUZ8DSXnVgycEBYSuW/ xO/TrzWZUz5cl5q2BOD+aFZBsSbhvPJhH1URdJyZxeU5Io624RQtzre4TP9W8iZ0B0S8OgYqGBul VsL4Z4psSQgSg89AxFU= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for BONDPRO.GOV/SOA
	Received 1946 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1946 bytes) ;; HEADER SECTION ;; id = 22807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN SOA ;; ANSWER SECTION (2 records) BONDPRO.GOV. 300 IN SOA ( ns1.treasury.GOV. webadmin.bpd.treas.GOV. 2006156029 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) BONDPRO.GOV. 300 IN RRSIG ( SOA 8 2 300 20201005220522 20200928220522 11955 bondpro.gov. KcVnglA4+vbPLTOZpHWghKLMVsohu7mg77Xl3QLhJjjcMZzdeDgeUG0GGYbgN/iu8QqhN5nvH1XS KecFmwTYno13n3nl6hZo2iY4wddTbzLsvxpY8l+G0HFxh1ApkRLK+rd9/PSNUbWqP+i0dr/XrciQ EDsWVTFpRFvt1sMeorc= ) ;; AUTHORITY SECTION (3 records) BONDPRO.GOV. 300 IN NS ns1.treasury.GOV. BONDPRO.GOV. 300 IN NS ns3.treasury.GOV. BONDPRO.GOV. 300 IN RRSIG ( NS 8 2 300 20201005182006 20200928182006 11955 bondpro.gov. VVvV6ao2HlKV1Lu9Mn6VuZtrBvsWqkovnO3BGEs4bYypeBHMaWvT2LGz184lj6nnLP+qwtwCAEVz 1f6pXoFTX+Oe2Zjq1XPigGaQtrHRtYayTJ3tjC3vh3GMXZszV9FThYhQBlseoa2Bof7TNMS2rnDv ixP47nh+Jv5204dOy4w= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201005181008 20200928181008 22148 treasury.gov. BcZEbCjo4lV90VSxVQ1W95i1JTjjnOmVH4ylG7acVqxf6IN3zzkerwTrup8YyO9ltHM4KieKaCRQ Fq23ib5eu8lgMyhzjV0seNp5LRVcoDJV1wmJD1ilD9d+dppXnCpSfEDudiAis9f/hGNXK4VuM3I+ H/Z7xSwATwD14FaUh48= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201005181008 20200928181008 22148 treasury.gov. AuOBTpuFKQPM+bshvc5i/Z8BdVlZ3WLBoXlAsFExS7mIKXX6aAUPnXpkVtGa9quOUDvaMLHsOr81 mvbdaQDNIipOquiQWG8lyLUTCSuGCuCxR1+Vw+MheifMRKb0k78AZ6l3MElfsfXtVALLdsav7M3r hFxBd01rM0b2RP/43tA= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201005181008 20200928181008 22148 treasury.gov. TjkykkAhBDuesLri7ntoyH3+sEi/2g+mp56G9GKbORlIxWeBO+fOK00gQ3mc9A6Ogi3IGWPH6Qlb 5IA1aRWFk311AV6W7C5U5x1l7qpL915vFCUF4isIjWHneTa6KcOUIQQadhBPOcTcrRFM7kaGPgMP hMbUIQBylfeGlWJmNgY= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201005181008 20200928181008 22148 treasury.gov. ZBeCD/g1u4b7N7oPsPn8AY35Ym5ggJVu8nzB7mRkpMysdszJDIj668IFzCUBLvA0KH+muTlvcaP5 X2X3pziXMg3Oj9MCXTkc8O7BMSoVe9QiF1wocn8jJ/Rd3D9edQZs4FUMtOQlDllQ2MNdeODWmNU9 GSwqYD9GzktS6pfHaQ8= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for BONDPRO.GOV/A
	Received 1907 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1907 bytes) ;; HEADER SECTION ;; id = 53442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN A ;; ANSWER SECTION (2 records) BONDPRO.GOV. 86400 IN A 166.123.219.80 BONDPRO.GOV. 86400 IN RRSIG ( A 8 2 86400 20201005181137 20200928181137 11955 bondpro.gov. aUVz8Q0jIv2nSHHlZ4l1KeQkgTbsXMnx4dc+l7KbRwLMPl0u0vRjQLoabD96b8ULUOghwU8+IqAo 1CrLKFyzDapkdY56EU60T6aNefPNdIDA4bMHipX9/wB7yQ9fmuI7t/v0P8N/EIBg/RuuylNBw7Dm b2r80hAsn+sFPxWMU7o= ) ;; AUTHORITY SECTION (3 records) BONDPRO.GOV. 300 IN NS ns1.treasury.GOV. BONDPRO.GOV. 300 IN NS ns3.treasury.GOV. BONDPRO.GOV. 300 IN RRSIG ( NS 8 2 300 20201005181137 20200928181137 11955 bondpro.gov. FOdhZnD/Bpm/yUOsHw+lt3L6ZRL25CYJXK2kfMOjXj7gPdA5FLhlKC7Hu+rumR0lTont57ynGBRu vKNDZH82zrIghmgsS0EoMNGfi3PpJPbTX4uyZwhaZp3wXqhxKTuBKOT8laQU9NVfjXbojQExcAw7 8wWRO4AG7jMCF3l/FN4= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201005181008 20200928181008 22148 treasury.gov. BcZEbCjo4lV90VSxVQ1W95i1JTjjnOmVH4ylG7acVqxf6IN3zzkerwTrup8YyO9ltHM4KieKaCRQ Fq23ib5eu8lgMyhzjV0seNp5LRVcoDJV1wmJD1ilD9d+dppXnCpSfEDudiAis9f/hGNXK4VuM3I+ H/Z7xSwATwD14FaUh48= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020931 20200925020931 13 treasury.gov. W0g3bWDHg6pCY5xhLxIE9gFZvTw+zPrsa1sCECtkyD3hKapVGMEHMqdnjMiRKlLtA2LDspggr3ek mz9qvxsXEMLogD6JGClUVWF2Doe6TMLEKwDlJh4qbQ5K0uR51RvlLyPoQXkcLHXv5Snwnpf1gYyN qfzwbx+awKrSD3Yw++I= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201005181008 20200928181008 22148 treasury.gov. AuOBTpuFKQPM+bshvc5i/Z8BdVlZ3WLBoXlAsFExS7mIKXX6aAUPnXpkVtGa9quOUDvaMLHsOr81 mvbdaQDNIipOquiQWG8lyLUTCSuGCuCxR1+Vw+MheifMRKb0k78AZ6l3MElfsfXtVALLdsav7M3r hFxBd01rM0b2RP/43tA= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020931 20200925020931 13 treasury.gov. bDo4r1wvFPKgMQZ9dHRe3VZz7zd9xoUK0jVxZR/rJNys51qndklGSU5X3TJjh66tHK2dIqIo5+ap neTq7psZVa2cuXS+PGTbfEs2gisl5QX0Nq/ROv8Bua8jAV4uiiwZk5jN4x6+LDsKQtalAXVpceKO GhtFN2WGdjrcCKOlqkM= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201005181008 20200928181008 22148 treasury.gov. TjkykkAhBDuesLri7ntoyH3+sEi/2g+mp56G9GKbORlIxWeBO+fOK00gQ3mc9A6Ogi3IGWPH6Qlb 5IA1aRWFk311AV6W7C5U5x1l7qpL915vFCUF4isIjWHneTa6KcOUIQQadhBPOcTcrRFM7kaGPgMP hMbUIQBylfeGlWJmNgY= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020931 20200925020931 13 treasury.gov. EioY27B53oml/yNfuLaS/RUbc0nU/iCGFDsal5+8D5n1n3+lKABMPPb+f7nnNFJHy25QLTQad5fo hdfvn1Rd9+5BxgyF2TO9LleN8i1Aet1CLDpYUQuz/O6tjDfpWqYFgh544cNGTlmwieg4gthoF4gb 7YQNndxJfOMmTJWzTyU= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201005181008 20200928181008 22148 treasury.gov. ZBeCD/g1u4b7N7oPsPn8AY35Ym5ggJVu8nzB7mRkpMysdszJDIj668IFzCUBLvA0KH+muTlvcaP5 X2X3pziXMg3Oj9MCXTkc8O7BMSoVe9QiF1wocn8jJ/Rd3D9edQZs4FUMtOQlDllQ2MNdeODWmNU9 GSwqYD9GzktS6pfHaQ8= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020931 20200925020931 13 treasury.gov. Sntk8x/SYTRartZfZKhw1Cd1SRpltl+dl8B4fRFKWz+gBqLoYObemqlAosbTN+gSKVzDgdgcLSAy RAMKkKw/TsowAyy2v6rqpfzzwlDM4vU80cFcFF33/OAjcy05Qk4oOwKRE7m5e5xFdjv5SrltreAr nYCc0ZiNJwH9PSFuaOY= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	BONDPRO.GOV A RR has value 166.123.219.80
	Found 1 RRSIGs over A RRset
	`BONDPRO.GOV. 86400 IN RRSIG ( A 8 2 86400 20201005181137 20200928181137 11955 bondpro.gov. aUVz8Q0jIv2nSHHlZ4l1KeQkgTbsXMnx4dc+l7KbRwLMPl0u0vRjQLoabD96b8ULUOghwU8+IqAo 1CrLKFyzDapkdY56EU60T6aNefPNdIDA4bMHipX9/wB7yQ9fmuI7t/v0P8N/EIBg/RuuylNBw7Dm b2r80hAsn+sFPxWMU7o= )`
	RRSIG=11955 and DNSKEY=11955 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test BONDPRO.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: